53e17148fc91e08208ba5180562a7defddfa3f119d43634babf0ba4ea13aca9e

Analysis

max time kernel
84s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 00:17

Target

53e17148fc91e08208ba5180562a7defddfa3f119d43634babf0ba4ea13aca9e.exe
Size

294KB
MD5

d22f54b409b953cfe1f0c02414c4e52d
SHA1

a8d286cf7703ce656e30581f711bffd5b42e1f6d
SHA256

53e17148fc91e08208ba5180562a7defddfa3f119d43634babf0ba4ea13aca9e
SHA512

e1c6859b4b7026d452fc93f24e8e696592a230e189cb1205d5d8ddeea3ea33e7a5a9f3b21cf0b9ff873e30c671247125db73639af1fd6bf38c67611d308d7d15
SSDEEP

6144:3OHgz46ogwWQIsfgiDOppppppppppppppppppppppppppppppppppppppppppppR:3mgz1jiOpppppppppppppppppppppppv

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1684	53e17148fc91e08208ba5180562a7defddfa3f119d43634babf0ba4ea13aca9e.exe

C:\Users\Admin\AppData\Local\Temp\53e17148fc91e08208ba5180562a7defddfa3f119d43634babf0ba4ea13aca9e.exe
"C:\Users\Admin\AppData\Local\Temp\53e17148fc91e08208ba5180562a7defddfa3f119d43634babf0ba4ea13aca9e.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1684